containerd 1.6.39
Welcome to the v1.6.39 release of containerd!
The thirty-ninth patch release for containerd 1.6 contains various fixes
and updates.
### Highlights
#### Runtime
* Fix close container io not closed when runtime create failed ([#12052](#12052))
* Update runc binary to v1.3.0 ([#11799](#11799))
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
### Contributors
* Akihiro Suda
* Austin Vazquez
* Phil Estes
* Derek McGowan
* Kirtana Ashok
* Akhil Mohan
* Maksym Pavlenko
* Mike Brown
* madraceee
* ningmingxiao
* zounengren
### Changes
<details><summary>33 commits</summary>
<p>
* Prepare release notes for v1.6.39 ([#12045](#12045))
  * [`22134cbfe`](22134cb) Prepare release notes for v1.6.39
* ci: bump Go 1.23.11, 1.24.5 ([#12118](#12118))
  * [`067a639f6`](067a639) ci: bump Go 1.23.11, 1.24.5
* Backport windows test fixes ([#12122](#12122))
  * [`9cc952fb0`](9cc952f) Fix intermittent test failures on Windows CIs
  * [`555a34af0`](555a34a) Remove WS2025 from CIs due to regression
* ci: use fedora 39 archive ([#12125](#12125))
  * [`b58df07d6`](b58df07) ci: use fedora 39 archive
* go.mod: github.com/containerd/btrfs v1.0.1 ([#12105](#12105))
  * [`fa4b325e0`](fa4b325) go.mod: github.com/containerd/btrfs v1.0.1
* go.mod:  golang.org/x/* latest,  github.com/go-jose/go-jose/v3 v3.0.4 ([#12095](#12095))
  * [`2c9f5778f`](2c9f577) Fix lint failures
  * [`b2576bb82`](b2576bb) go.mod: github.com/go-jose/go-jose/v3 v3.0.4
  * [`262e98e90`](262e98e) go.mod: golang.org/x/* latest
* Fix close container io not closed when runtime create failed ([#12052](#12052))
  * [`22f669a7c`](22f669a) bugfix:close container io when runtime create failed
* backport windows runner and golang toolchain updates ([#12005](#12005))
  * [`c165cc68b`](c165cc6) ci: bump Go 1.24.4 in CI
  * [`ffacabc05`](ffacabc) ci: bump golang [1.23.9, 1.24.3] in build and release
  * [`3ec9965e8`](3ec9965) use go1.23.8 as the default go version
  * [`e62a059a2`](e62a059) update to go 1.24.2, 1.23.8
  * [`d430f3277`](d430f32) Enable CIs to run on WS2022 and WS2025
* Update runc binary to v1.3.0 ([#11799](#11799))
  * [`d00ccf523`](d00ccf5) Update runc binary to v1.3.0
* test: added runc v1 support in vagrant ([#11913](#11913))
  * [`9e49725bf`](9e49725) test: added runc v1 support in vagrant
* : Fix CI ([#11804](#11804))
  * [`57250c719`](57250c7) Skip criu on Arms
  * [`9d350bbbd`](9d350bb) Address cgroup mountpoint does not exist
  * [`78cbefc95`](78cbefc) ci: update GitHub Actions release runner to ubuntu-24.04
* Update runc binary to v1.2.6 ([#11585](#11585))
  * [`2325157ed`](2325157) Update runc binary to v1.2.6
</p>
</details>
### Changes from containerd/btrfs
<details><summary>12 commits</summary>
<p>
* Fix `error: implicit declaration of function ‘memcpy’` ([containerd/btrfs#44](containerd/btrfs#44))
  * [`3fb5c91`](containerd/btrfs@3fb5c91) CI: update (Go 1.23, etc.)
  * [`cab79ec`](containerd/btrfs@cab79ec) CI: enable jobs for release/1.0
  * [`12b3998`](containerd/btrfs@12b3998) Fix `error: implicit declaration of function ‘memcpy’`
* Update GitHub actions CI workflow ([containerd/btrfs#38](containerd/btrfs#38))
  * [`5d1f727`](containerd/btrfs@5d1f727) Update GitHub actions CI workflow
* Upgrade Go compiler from Go 1.16 to Go 1.19 ([containerd/btrfs#39](containerd/btrfs#39))
  * [`d16e22b`](containerd/btrfs@d16e22b) Upgrade Go compiler from Go 1.16 to Go 1.19
* replace pkg/errors ([containerd/btrfs#35](containerd/btrfs#35))
  * [`9933796`](containerd/btrfs@9933796) replace pkg/errors
* Branch rename for GH Actions ([containerd/btrfs#33](containerd/btrfs#33))
  * [`1aff978`](containerd/btrfs@1aff978) Branch rename for GH Actions
</p>
</details>
### Dependency Changes
* **cloud.google.com/go/compute/metadata**  v0.2.3 -> v0.3.0
* **github.com/containerd/btrfs**           v1.0.0 -> v1.0.1
* **github.com/go-jose/go-jose/v3**         v3.0.3 -> v3.0.4
* **golang.org/x/crypto**                   v0.21.0 -> v0.40.0
* **golang.org/x/net**                      v0.23.0 -> v0.42.0
* **golang.org/x/oauth2**                   v0.11.0 -> v0.30.0
* **golang.org/x/sync**                     v0.3.0 -> v0.16.0
* **golang.org/x/sys**                      v0.18.0 -> v0.34.0
* **golang.org/x/term**                     v0.18.0 -> v0.33.0
* **golang.org/x/text**                     v0.14.0 -> v0.27.0
* **golang.org/x/time**                     1f47c861a9ac -> v0.12.0
Previous release can be found at [v1.6.38](https://github.com/containerd/containerd/releases/tag/v1.6.38)

containerd 2.1.3
Welcome to the v2.1.3 release of containerd!
The third patch release for containerd 2.1 contains various fixes and updates
to address pull issues with some registries.
### Highlights
#### Image Distribution
* Fix multipart fetch issue when the server does not return content length ([#12003](#12003))
* Update transfer service supported platforms logic ([#11999](#11999))
* Fix import for local transfer service ([#12000](#12000))
* Fix registry errors with transfer service ([#11979](#11979))
* Fix fetch always adding range to requests ([#12001](#12001))
* Update fetcher errors to include full registry error ([#11997](#11997))
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
### Contributors
* Derek McGowan
* Phil Estes
* Adrien Delorme
### Changes
<details><summary>15 commits</summary>
<p>
* Prepare release notes for v2.1.3 ([#12002](#12002))
  * [`627729341`](6277293) Prepare release notes for v2.1.3
* Fix multipart fetch issue when the server does not return content length ([#12003](#12003))
  * [`7636bd5eb`](7636bd5) fix when multipart fetching and the server does not return content length
* Update transfer service supported platforms logic ([#11999](#11999))
  * [`3c5ede878`](3c5ede8) Update transfer supported platforms logic
* Fix import for local transfer service ([#12000](#12000))
  * [`fb752bc8e`](fb752bc) fix import for local transfer service
* Fix registry errors with transfer service ([#11979](#11979))
  * [`f6d926314`](f6d9263) Register remote errors for clients to access registry errors
  * [`7c1813345`](7c18133) Decode grpc errors in the transfer client proxy
* Fix fetch always adding range to requests ([#12001](#12001))
  * [`babacebad`](babaceb) Fix fetch always adding range to requests
* Update fetcher errors to include full registry error ([#11997](#11997))
  * [`f30be44ad`](f30be44) Update fetcher errors to include full registry error
</p>
</details>
### Dependency Changes
This release has no dependency changes
Previous release can be found at [v2.1.2](https://github.com/containerd/containerd/releases/tag/v2.1.2)
### Which file should I download?
* `containerd-<VERSION>-<OS>-<ARCH>.tar.gz`:         ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).
* `containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz`:  Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.
In addition to containerd, typically you will have to install [runc](https://github.com/opencontainers/runc/releases)
and [CNI plugins](https://github.com/containernetworking/plugins/releases) from their official sites too.
See also the [Getting Started](https://github.com/containerd/containerd/blob/main/docs/getting-started.md) documentation.

containerd 2.1.2
Welcome to the v2.1.2 release of containerd!
The second patch release for containerd 2.1 contains various fixes and updates.
### Highlights
* Fix check of wrapped errors in erofs snapshotter ([#11935](#11935))
#### Go client
* Improve mount error message ([#11884](#11884))
#### Image Distribution
* Fix transfer differ selection ([#11936](#11936))
* Enable DuplicationSuppressor in transfer service ([#11932](#11932))
#### Runtime
* Properly shutdown non-groupable shims to prevent resource leaks ([#11971](#11971))
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
### Contributors
* Derek McGowan
* Akihiro Suda
* Kirtana Ashok
* Austin Vazquez
* Maksym Pavlenko
* ningmingxiao
* Gao Xiang
* Henry Wang
* Jin Dong
* Phil Estes
* Wei Fu
### Changes
<details><summary>28 commits</summary>
<p>
* Prepare release notes for v2.1.2 ([#11962](#11962))
  * [`63b9eae62`](63b9eae) Prepare release notes for v2.1.2
* Properly shutdown non-groupable shims to prevent resource leaks ([#11971](#11971))
  * [`cff1feb28`](cff1feb) *: properly shutdown non-groupable shims to prevent resource leaks
* ci: bump golang [1.23.10,1.24.4] in build and release ([#11968](#11968))
  * [`2ce169aae`](2ce169a) ci: bump golang [1.23.10,1.24.4] in build and release
* Backport Enable CIs to run on WS2022 and WS2025 ([#11955](#11955))
  * [`70bcb9b55`](70bcb9b) Enable CIs to run on WS2022 and WS2025
* cri:use debug level when receive exec process exited events ([#11848](#11848))
  * [`40575a15f`](40575a1) cri:use debug level when receive exec process exited events
* build(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2 ([#11952](#11952))
  * [`c71f77170`](c71f771) build(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2
* Fix transfer differ selection ([#11936](#11936))
  * [`4bcea74de`](4bcea74) Update differ selection in transfer service to prefer default
  * [`0c3cd8a99`](0c3cd8a) Add debug log when transfer returns not implemented
  * [`820e56765`](820e567) Add more error details when unpack fails to extract
* Fetch image with default platform only in TestExportAndImportMultiLayer ([#11943](#11943))
  * [`9b6c1949a`](9b6c194) Fetch image with default platform only in TestExportAndImportMultiLayer
* Fix check of wrapped errors in erofs snapshotter ([#11935](#11935))
  * [`480126f50`](480126f) erofs-snapshotter: fix to work with wrapped errors
* Enable DuplicationSuppressor in transfer service ([#11932](#11932))
  * [`d82921ff5`](d82921f) Enable DuplicationSuppressor in transfer service
* ci: bump golang [1.23.9, 1.24.3] in build and release ([#11889](#11889))
  * [`0bb25c3d6`](0bb25c3) ci: bump golang [1.23.9, 1.24.3] in build and release
* Improve mount error message ([#11884](#11884))
  * [`ac8e84efc`](ac8e84e) client:improve mount error message
* Add symlink breakout test for overriden path ([#11887](#11887))
  * [`dd2ce49d0`](dd2ce49) Add symlink breakout test for overriden path
</p>
</details>
### Dependency Changes
* **google.golang.org/grpc**  v1.72.0 -> v1.72.2
Previous release can be found at [v2.1.1](https://github.com/containerd/containerd/releases/tag/v2.1.1)
### Which file should I download?
* `containerd-<VERSION>-<OS>-<ARCH>.tar.gz`:         ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).
* `containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz`:  Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.
In addition to containerd, typically you will have to install [runc](https://github.com/opencontainers/runc/releases)
and [CNI plugins](https://github.com/containernetworking/plugins/releases) from their official sites too.
See also the [Getting Started](https://github.com/containerd/containerd/blob/main/docs/getting-started.md) documentation.

containerd 2.1.1
Welcome to the v2.1.1 release of containerd!
The first patch release for containerd 2.1 fixes a critical vulnernability (CVE-2025-47290)
which was first introduced in 2.1.0. See the [Github Advisory](GHSA-cm76-qm8v-3j95)
for more details. This release also contains a few smaller updates and bux fixes.
### Highlights
#### Image Storage
* Fix erofs media type handling ([#11855](#11855))
#### Runtime
* Reduce shim cleanup log level and add more context ([#11831](#11831))
#### Deprecations
* Update removal version for deprecated registry config fields ([#11835](#11835))
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
### Contributors
* Akihiro Suda
* Samuel Karp
* Derek McGowan
* Gao Xiang
* Akhil Mohan
* Chris Henzie
* Phil Estes
* Sebastiaan van Stijn
* ningmingxiao
### Changes
<details><summary>17 commits</summary>
<p>
  * [`cb1076646`](cb10766) Merge commit from fork
  * [`216667ba0`](216667b) Prepare release notes for 2.1.1
  * [`ac00b8e61`](ac00b8e) Revert "perf(applyNaive): avoid walking the tree for each file in the same directory"
* build(deps): bump github.com/Microsoft/hcsshim ([#11847](#11847))
  * [`444ca17cd`](444ca17) update runhcs version to v0.13.0
  * [`0684f1c44`](0684f1c) build(deps): bump github.com/Microsoft/hcsshim
* Fix erofs media type handling ([#11855](#11855))
  * [`e1817a401`](e1817a4) docs/snapshotters/erofs.md: a tip for improved performance
  * [`2168cb92c`](2168cb9) erofs-differ: fix EROFS native image support
* Reduce shim cleanup log level and add more context ([#11831](#11831))
  * [`7fcbc3c46`](7fcbc3c) core/runtime/v2: cleanup shim-cleanup logs
* Update removal version for deprecated registry config fields ([#11835](#11835))
  * [`37d6c4236`](37d6c42) Update removal version for deprecated registry config fields
* ctr:make sure containerd socket exist before create client ([#11827](#11827))
  * [`e7be076d4`](e7be076) ctr:make sure containerd socket exist before create client
* .github: mark 2.1 releases as latest ([#11821](#11821))
  * [`c90524d5f`](c90524d) .github: mark 2.1 releases as latest
</p>
</details>
### Dependency Changes
* **github.com/Microsoft/hcsshim**  v0.13.0-rc.3 -> v0.13.0
Previous release can be found at [v2.1.0](https://github.com/containerd/containerd/releases/tag/v2.1.0)
### Which file should I download?
* `containerd-<VERSION>-<OS>-<ARCH>.tar.gz`:         ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).
* `containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz`:  Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.
In addition to containerd, typically you will have to install [runc](https://github.com/opencontainers/runc/releases)
and [CNI plugins](https://github.com/containernetworking/plugins/releases) from their official sites too.
See also the [Getting Started](https://github.com/containerd/containerd/blob/main/docs/getting-started.md) documentation.

containerd 2.1.0
Welcome to the v2.1.0 release of containerd!
The first minor release of containerd 2.x focuses on continued stability alongside
new features and improvements. This is the first time-based released for containerd.
Most the feature set and core functionality has long been stable and harderened in production
environments, so now we transition to a balance of timely delivery of new functionality
with the same high confidence in stability and performance.
### Highlights
* Add no_sync option to boost boltDB performance on ephemeral environments ([#10745](#10745))
* Add content create event ([#11006](#11006))
* Erofs snapshotter and differ ([#10705](#10705))
#### Container Runtime Interface (CRI)
* Update CRI to use transfer service for image pull by default ([#8515](#8515))
* Support multiple cni plugin bin dirs ([#11311](#11311))
* Support container restore through CRI/Kubernetes ([#10365](#10365))
* Add OCI/Image Volume Source support ([#10579](#10579))
* Enable Writable cgroups for unprivileged containers ([#11131](#11131))
* Fix recursive RLock() mutex acquisition ([containerd/go-cni#126](containerd/go-cni#126))
* Support CNI STATUS Verb ([containerd/go-cni#123](containerd/go-cni#123))
#### Image Distribution
* Retry last registry host on 50x responses ([#11484](#11484))
* Multipart layer fetch ([#10177](#10177))
* Enable HTTP debug and trace for transfer based puller ([#10762](#10762))
* Add support for unpacking custom media types  ([#11744](#11744))
* Add dial timeout field to hosts toml configuration ([#11106](#11106))
#### Node Resource Interface (NRI)
* Expose Pod assigned IPs to NRI plugins ([#10921](#10921))
#### Runtime
* Support multiple uid/gid mappings ([#10722](#10722))
* Fix race between serve and immediate shutdown on the server ([containerd/ttrpc#175](containerd/ttrpc#175))
#### Breaking
* Update FreeBSD defaults and re-organize platform defaults ([#11017](#11017))
#### Deprecations
* Postpone cri config deprecations to v2.2 ([#11684](#11684))
* Remove deprecated dynamic library plugins ([#11683](#11683))
* Remove the support for Schema 1 images ([#11681](#11681))
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
### Contributors
* Derek McGowan
* Phil Estes
* Akihiro Suda
* Maksym Pavlenko
* Jin Dong
* Wei Fu
* Sebastiaan van Stijn
* Samuel Karp
* Mike Brown
* Adrien Delorme
* Austin Vazquez
* Akhil Mohan
* Kazuyoshi Kato
* Henry Wang
* Gao Xiang
* ningmingxiao
* Krisztian Litkey
* Yang Yang
* Archit Kulkarni
* Chris Henzie
* Iceber Gu
* Alexey Lunev
* Antonio Ojea
* Davanum Srinivas
* Marat Radchenko
* Michael Zappa
* Paweł Gronowski
* Rodrigo Campos
* Alberto Garcia Hierro
* Amit Barve
* Andrey Smirnov
* Divya
* Etienne Champetier
* Kirtana Ashok
* Philip Laine
* QiPing Wan
* fengwei0328
* zounengren
* Adrian Reber
* Alfred Wingate
* Amal Thundiyil
* Athos Ribeiro
* Brian Goff
* Cesar Talledo
* ChengyuZhu6
* Chongyi Zheng
* Craig Ingram
* Danny Canter
* David Son
* Fupan Li
* HirazawaUi
* Jing Xu
* Jonathan A. Sternberg
* Jose Fernandez
* Kaita Nakamura
* Kohei Tokunaga
* Lei Liu
* Marco Visin
* Mike Baynton
* Qiyuan Liang
* Sameer
* Shiming Zhang
* Swagat Bora
* Teresaliu
* Tony Fang
* Tõnis Tiigi
* Vered Rosen
* Vinayak Goyal
* bo.jiang
* chriskery
* luchenhan
* mahmut
* zhaixiaojuan
### Dependency Changes
* **github.com/Microsoft/hcsshim**                                                 v0.12.9 -> v0.13.0-rc.3
* **github.com/cilium/ebpf**                                                       v0.11.0 -> v0.16.0
* **github.com/containerd/cgroups/v3**                                             v3.0.3 -> v3.0.5
* **github.com/containerd/containerd/api**                                         v1.8.0 -> v1.9.0
* **github.com/containerd/continuity**                                             v0.4.4 -> v0.4.5
* **github.com/containerd/go-cni**                                                 v1.1.10 -> v1.1.12
* **github.com/containerd/imgcrypt/v2**                                            v2.0.0-rc.1 -> v2.0.1
* **github.com/containerd/otelttrpc**                                              ea5083fda723 -> v0.1.0
* **github.com/containerd/platforms**                                              v1.0.0-rc.0 -> v1.0.0-rc.1
* **github.com/containerd/ttrpc**                                                  v1.2.6 -> v1.2.7
* **github.com/containerd/typeurl/v2**                                             v2.2.2 -> v2.2.3
* **github.com/containernetworking/cni**                                           v1.2.3 -> v1.3.0
* **github.com/containernetworking/plugins**                                       v1.5.1 -> v1.7.1
* **github.com/containers/ocicrypt**                                               v1.2.0 -> v1.2.1
* **github.com/davecgh/go-spew**                                                   d8f796af33cc -> v1.1.1
* **github.com/fsnotify/fsnotify**                                                 v1.7.0 -> v1.9.0
* **github.com/go-jose/go-jose/v4**                                                v4.0.4 -> v4.0.5
* **github.com/google/go-cmp**                                                     v0.6.0 -> v0.7.0
* **github.com/grpc-ecosystem/grpc-gateway/v2**                                    v2.22.0 -> v2.26.1
* **github.com/klauspost/compress**                                                v1.17.11 -> v1.18.0
* **github.com/mdlayher/socket**                                                   v0.4.1 -> v0.5.1
* **github.com/moby/spdystream**                                                   v0.4.0 -> v0.5.0
* **github.com/moby/sys/user**                                                     v0.3.0 -> v0.4.0
* **github.com/opencontainers/image-spec**                                         v1.1.0 -> v1.1.1
* **github.com/opencontainers/runtime-spec**                                       v1.2.0 -> v1.2.1
* **github.com/opencontainers/selinux**                                            v1.11.1 -> v1.12.0
* **github.com/pelletier/go-toml/v2**                                              v2.2.3 -> v2.2.4
* **github.com/petermattis/goid**                                                  4fcff4a6cae7 **_new_**
* **github.com/pmezard/go-difflib**                                                5d4384ee4fb2 -> v1.0.0
* **github.com/prometheus/client_golang**                                          v1.20.5 -> v1.22.0
* **github.com/prometheus/common**                                                 v0.55.0 -> v0.62.0
* **github.com/sasha-s/go-deadlock**                                               v0.3.5 **_new_**
* **github.com/smallstep/pkcs7**                                                   v0.1.1 **_new_**
* **github.com/stretchr/testify**                                                  v1.9.0 -> v1.10.0
* **github.com/tchap/go-patricia/v2**                                              v2.3.1 -> v2.3.2
* **github.com/urfave/cli/v2**                                                     v2.27.5 -> v2.27.6
* **github.com/vishvananda/netlink**                                               v1.3.0 -> 0e7078ed04c8
* **github.com/vishvananda/netns**                                                 v0.0.4 -> v0.0.5
* **go.etcd.io/bbolt**                                                             v1.3.11 -> v1.4.0
* **go.opentelemetry.io/auto/sdk**                                                 v1.1.0 **_new_**
* **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc**  v0.56.0 -> v0.60.0
* **go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp**                v0.56.0 -> v0.60.0
* **go.opentelemetry.io/otel**                                                     v1.31.0 -> v1.35.0
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace**                            v1.31.0 -> v1.35.0
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc**              v1.31.0 -> v1.35.0
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp**              v1.31.0 -> v1.35.0
* **go.opentelemetry.io/otel/metric**                                              v1.31.0 -> v1.35.0
* **go.opentelemetry.io/otel/sdk**                                                 v1.31.0 -> v1.35.0
* **go.opentelemetry.io/otel/trace**                                               v1.31.0 -> v1.35.0
* **go.opentelemetry.io/proto/otlp**                                               v1.3.1 -> v1.5.0
* **golang.org/x/crypto**                                                          v0.28.0 -> v0.36.0
* **golang.org/x/exp**                                                             aacd6d4b4611 -> 2d47ceb2692f
* **golang.org/x/mod**                                                             v0.21.0 -> v0.24.0
* **golang.org/x/net**                                                             v0.30.0 -> v0.38.0
* **golang.org/x/oauth2**                                                          v0.22.0 -> v0.27.0
* **golang.org/x/sync**                                                            v0.8.0 -> v0.14.0
* **golang.org/x/sys**                                                             v0.26.0 -> v0.33.0
* **golang.org/x/term**                                                            v0.25.0 -> v0.30.0
* **golang.org/x/text**                                                            v0.19.0 -> v0.23.0
* **golang.org/x/time**                                                            v0.3.0 -> v0.7.0
* **google.golang.org/genproto/googleapis/api**                                    5fefd90f89a9 -> 56aae31c358a
* **google.golang.org/genproto/googleapis/rpc**                                    324edc3d5d38 -> 56aae31c358a
* **google.golang.org/grpc**                                                       v1.67.1 -> v1.72.0
* **google.golang.org/protobuf**                                                   v1.35.1 -> v1.36.6
* **k8s.io/api**                                                                   v0.31.2 -> v0.32.3
* **k8s.io/apimachinery**                                                          v0.31.2 -> v0.32.3
* **k8s.io/apiserver**                                                             v0.31.2 -> v0.32.3
* **k8s.io/client-go**                                                             v0.31.2 -> v0.32.3
* **k8s.io/cri-api**                                                               v0.31.2 -> v0.32.3
* **k8s.io/kubelet**                                                               v0.31.2 -> v0.32.3
* **k8s.io/utils**                                                                 18e509b52bc8 -> 3ea5e8cea738
* **sigs.k8s.io/json**                                                             bc3834ca7abd -> 9aa6b5e7a4b3
* **sigs.k8s.io/structured-merge-diff/v4**                                         v4.4.1 -> v4.4.2
* **tags.cncf.io/container-device-interface**                                      v0.8.0 -> v1.0.1
* **tags.cncf.io/container-device-interface/specs-go**                             v0.8.0 -> v1.0.0
Previous release can be found at [v2.0.0](https://github.com/containerd/containerd/releases/tag/v2.0.0)
### Which file should I download?
* `containerd-<VERSION>-<OS>-<ARCH>.tar.gz`:         ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).
* `containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz`:  Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.
In addition to containerd, typically you will have to install [runc](https://github.com/opencontainers/runc/releases)
and [CNI plugins](https://github.com/containernetworking/plugins/releases) from their official sites too.
See also the [Getting Started](https://github.com/containerd/containerd/blob/main/docs/getting-started.md) documentation.

containerd 2.1.0-rc.1
Welcome to the v2.1.0-rc.1 release of containerd!
*This is a pre-release of containerd*
The first minor release of containerd 2.x focuses on continued stability alongside
new features and improvements. This is the first time-based released for containerd.
Most the feature set and core functionality has long been stable and harderened in production
environments, so now we transition to a balance of timely delivery of new functionality
with the same high confidence in stability and performance.
### Highlights
* Add no_sync option to boost boltDB performance on ephemeral environments ([#10745](#10745))
* Add content create event ([#11006](#11006))
* Erofs snapshotter and differ ([#10705](#10705))
#### Container Runtime Interface (CRI)
* Update CRI to use transfer service for image pull by default ([#8515](#8515))
* Support multiple cni plugin bin dirs ([#11311](#11311))
* Support container restore through CRI/Kubernetes ([#10365](#10365))
* Add OCI/Image Volume Source support ([#10579](#10579))
* Enable Writable cgroups for unprivileged containers ([#11131](#11131))
* Fix recursive RLock() mutex acquisition ([containerd/go-cni#126](containerd/go-cni#126))
* Support CNI STATUS Verb ([containerd/go-cni#123](containerd/go-cni#123))
#### Image Distribution
* Retry last registry host on 50x responses ([#11484](#11484))
* Multipart layer fetch ([#10177](#10177))
* Enable HTTP debug and trace for transfer based puller ([#10762](#10762))
* Add support for unpacking custom media types  ([#11744](#11744))
* Add dial timeout field to hosts toml configuration ([#11106](#11106))
#### Node Resource Interface (NRI)
* Expose Pod assigned IPs to NRI plugins ([#10921](#10921))
#### Runtime
* Support multiple uid/gid mappings ([#10722](#10722))
* Fix race between serve and immediate shutdown on the server ([containerd/ttrpc#175](containerd/ttrpc#175))
#### Breaking
* Update FreeBSD defaults and re-organize platform defaults ([#11017](#11017))
#### Deprecations
* Postpone cri config deprecations to v2.2 ([#11684](#11684))
* Remove deprecated dynamic library plugins ([#11683](#11683))
* Remove the support for Schema 1 images ([#11681](#11681))
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
### Contributors
* Phil Estes
* Derek McGowan
* Akihiro Suda
* Maksym Pavlenko
* Jin Dong
* Wei Fu
* Sebastiaan van Stijn
* Samuel Karp
* Mike Brown
* Adrien Delorme
* Akhil Mohan
* Austin Vazquez
* Kazuyoshi Kato
* Henry Wang
* Gao Xiang
* ningmingxiao
* Krisztian Litkey
* Yang Yang
* Archit Kulkarni
* Chris Henzie
* Iceber Gu
* Alexey Lunev
* Antonio Ojea
* Davanum Srinivas
* Marat Radchenko
* Michael Zappa
* Paweł Gronowski
* Rodrigo Campos
* Alberto Garcia Hierro
* Amit Barve
* Andrey Smirnov
* Divya
* Etienne Champetier
* Kirtana Ashok
* Philip Laine
* QiPing Wan
* fengwei0328
* zounengren
* Adrian Reber
* Alfred Wingate
* Amal Thundiyil
* Athos Ribeiro
* Austin Vazquez
* Brian Goff
* Cesar Talledo
* ChengyuZhu6
* Chongyi Zheng
* Craig Ingram
* Danny Canter
* David Son
* Fupan Li
* HirazawaUi
* Jing Xu
* Jonathan A. Sternberg
* Jose Fernandez
* Kaita Nakamura
* Kohei Tokunaga
* Lei Liu
* Marco Visin
* Mike Baynton
* Qiyuan Liang
* Sameer
* Shiming Zhang
* Swagat Bora
* Teresaliu
* Tony Fang
* Tõnis Tiigi
* Vered Rosen
* Vinayak Goyal
* bo.jiang
* chriskery
* luchenhan
* mahmut
* zhaixiaojuan
### Dependency Changes
* **github.com/Microsoft/hcsshim**                                                 v0.12.9 -> v0.13.0-rc.3
* **github.com/cilium/ebpf**                                                       v0.11.0 -> v0.16.0
* **github.com/containerd/cgroups/v3**                                             v3.0.3 -> v3.0.5
* **github.com/containerd/containerd/api**                                         v1.8.0 -> v1.9.0-rc.0
* **github.com/containerd/continuity**                                             v0.4.4 -> v0.4.5
* **github.com/containerd/go-cni**                                                 v1.1.10 -> v1.1.12
* **github.com/containerd/imgcrypt/v2**                                            v2.0.0-rc.1 -> v2.0.1
* **github.com/containerd/otelttrpc**                                              ea5083fda723 -> v0.1.0
* **github.com/containerd/platforms**                                              v1.0.0-rc.0 -> v1.0.0-rc.1
* **github.com/containerd/ttrpc**                                                  v1.2.6 -> v1.2.7
* **github.com/containerd/typeurl/v2**                                             v2.2.2 -> v2.2.3
* **github.com/containernetworking/cni**                                           v1.2.3 -> v1.3.0
* **github.com/containernetworking/plugins**                                       v1.5.1 -> v1.7.1
* **github.com/containers/ocicrypt**                                               v1.2.0 -> v1.2.1
* **github.com/davecgh/go-spew**                                                   d8f796af33cc -> v1.1.1
* **github.com/fsnotify/fsnotify**                                                 v1.7.0 -> v1.9.0
* **github.com/go-jose/go-jose/v4**                                                v4.0.4 -> v4.0.5
* **github.com/google/go-cmp**                                                     v0.6.0 -> v0.7.0
* **github.com/grpc-ecosystem/grpc-gateway/v2**                                    v2.22.0 -> v2.26.1
* **github.com/klauspost/compress**                                                v1.17.11 -> v1.18.0
* **github.com/mdlayher/socket**                                                   v0.4.1 -> v0.5.1
* **github.com/moby/spdystream**                                                   v0.4.0 -> v0.5.0
* **github.com/moby/sys/user**                                                     v0.3.0 -> v0.4.0
* **github.com/opencontainers/image-spec**                                         v1.1.0 -> v1.1.1
* **github.com/opencontainers/runtime-spec**                                       v1.2.0 -> v1.2.1
* **github.com/opencontainers/selinux**                                            v1.11.1 -> v1.12.0
* **github.com/pelletier/go-toml/v2**                                              v2.2.3 -> v2.2.4
* **github.com/petermattis/goid**                                                  4fcff4a6cae7 **_new_**
* **github.com/pmezard/go-difflib**                                                5d4384ee4fb2 -> v1.0.0
* **github.com/prometheus/client_golang**                                          v1.20.5 -> v1.22.0
* **github.com/prometheus/common**                                                 v0.55.0 -> v0.62.0
* **github.com/sasha-s/go-deadlock**                                               v0.3.5 **_new_**
* **github.com/smallstep/pkcs7**                                                   v0.1.1 **_new_**
* **github.com/stretchr/testify**                                                  v1.9.0 -> v1.10.0
* **github.com/tchap/go-patricia/v2**                                              v2.3.1 -> v2.3.2
* **github.com/urfave/cli/v2**                                                     v2.27.5 -> v2.27.6
* **github.com/vishvananda/netlink**                                               v1.3.0 -> 0e7078ed04c8
* **github.com/vishvananda/netns**                                                 v0.0.4 -> v0.0.5
* **go.etcd.io/bbolt**                                                             v1.3.11 -> v1.4.0
* **go.opentelemetry.io/auto/sdk**                                                 v1.1.0 **_new_**
* **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc**  v0.56.0 -> v0.60.0
* **go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp**                v0.56.0 -> v0.60.0
* **go.opentelemetry.io/otel**                                                     v1.31.0 -> v1.35.0
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace**                            v1.31.0 -> v1.35.0
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc**              v1.31.0 -> v1.35.0
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp**              v1.31.0 -> v1.35.0
* **go.opentelemetry.io/otel/metric**                                              v1.31.0 -> v1.35.0
* **go.opentelemetry.io/otel/sdk**                                                 v1.31.0 -> v1.35.0
* **go.opentelemetry.io/otel/trace**                                               v1.31.0 -> v1.35.0
* **go.opentelemetry.io/proto/otlp**                                               v1.3.1 -> v1.5.0
* **golang.org/x/crypto**                                                          v0.28.0 -> v0.36.0
* **golang.org/x/exp**                                                             aacd6d4b4611 -> 2d47ceb2692f
* **golang.org/x/mod**                                                             v0.21.0 -> v0.24.0
* **golang.org/x/net**                                                             v0.30.0 -> v0.38.0
* **golang.org/x/oauth2**                                                          v0.22.0 -> v0.27.0
* **golang.org/x/sync**                                                            v0.8.0 -> v0.14.0
* **golang.org/x/sys**                                                             v0.26.0 -> v0.33.0
* **golang.org/x/term**                                                            v0.25.0 -> v0.30.0
* **golang.org/x/text**                                                            v0.19.0 -> v0.23.0
* **golang.org/x/time**                                                            v0.3.0 -> v0.7.0
* **google.golang.org/genproto/googleapis/api**                                    5fefd90f89a9 -> 56aae31c358a
* **google.golang.org/genproto/googleapis/rpc**                                    324edc3d5d38 -> 56aae31c358a
* **google.golang.org/grpc**                                                       v1.67.1 -> v1.72.0
* **google.golang.org/protobuf**                                                   v1.35.1 -> v1.36.6
* **k8s.io/api**                                                                   v0.31.2 -> v0.32.3
* **k8s.io/apimachinery**                                                          v0.31.2 -> v0.32.3
* **k8s.io/apiserver**                                                             v0.31.2 -> v0.32.3
* **k8s.io/client-go**                                                             v0.31.2 -> v0.32.3
* **k8s.io/cri-api**                                                               v0.31.2 -> v0.32.3
* **k8s.io/kubelet**                                                               v0.31.2 -> v0.32.3
* **k8s.io/utils**                                                                 18e509b52bc8 -> 3ea5e8cea738
* **sigs.k8s.io/json**                                                             bc3834ca7abd -> 9aa6b5e7a4b3
* **sigs.k8s.io/structured-merge-diff/v4**                                         v4.4.1 -> v4.4.2
* **tags.cncf.io/container-device-interface**                                      v0.8.0 -> v1.0.1
* **tags.cncf.io/container-device-interface/specs-go**                             v0.8.0 -> v1.0.0
Previous release can be found at [v2.0.0](https://github.com/containerd/containerd/releases/tag/v2.0.0)
### Which file should I download?
* `containerd-<VERSION>-<OS>-<ARCH>.tar.gz`:         ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).
* `containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz`:  Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.
In addition to containerd, typically you will have to install [runc](https://github.com/opencontainers/runc/releases)
and [CNI plugins](https://github.com/containernetworking/plugins/releases) from their official sites too.
See also the [Getting Started](https://github.com/containerd/containerd/blob/main/docs/getting-started.md) documentation.

containerd api/v1.9.0
Welcome to the api/v1.9.0 release of containerd!
The 10th release for the containerd 1.x API aligns with the containerd 2.1 release.
### Highlights
* Add content create event ([#11006](#11006))
#### Image Distribution
* Enable HTTP debug and trace for transfer based puller ([#10762](#10762))
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
### Contributors
* Derek McGowan
* Maksym Pavlenko
* Akihiro Suda
* Davanum Srinivas
* Phil Estes
* Adrian Reber
* Jin Dong
* Philip Laine
### Changes
<details><summary>18 commits</summary>
<p>
* Prepare release notes for api/v1.9.0 ([#11812](#11812))
  * [`145175bf4`](145175b) Prepare release notes for api/v1.9.0
* Add release notes for api v1.9.0-rc.0 ([#11751](#11751))
  * [`c0ce618a1`](c0ce618) Add release notes for api v1.9.0-rc.0
* Enable HTTP debug and trace for transfer based puller ([#10762](#10762))
  * [`17b6e1ef8`](17b6e1e) Allow streaming to client
  * [`40eb2fdbb`](40eb2fd) Fix protos
  * [`1d436803d`](1d43680) Add http debug fields to OCI registry protos
* Add content create event ([#11006](#11006))
  * [`752914b5b`](752914b) Add content create event to api
* bump golang.org/x/net from 0.33.0 to 0.37.0 ([#11574](#11574))
  * [`7fe5c4123`](7fe5c41) go.mod: golang.org/x/net v0.37.0
* Support container restore through CRI/Kubernetes ([#10365](#10365))
  * [`9e6beafd5`](9e6beaf) Support container restore through CRI/Kubernetes
* build(deps): bump golang.org/x/net from 0.23.0 to 0.33.0 in /api ([#11472](#11472))
  * [`37fe1e8b4`](37fe1e8) build(deps): bump golang.org/x/net from 0.23.0 to 0.33.0 in /api
* Bump to newer opencontainers/image-spec @ v1.1.1 ([#11461](#11461))
  * [`d37ea6977`](d37ea69) Bump to newer opencontainers/image-spec @ v1.1.1
</p>
</details>
### Dependency Changes
* **github.com/opencontainers/image-spec**  v1.1.0 -> v1.1.1
* **golang.org/x/net**                      v0.23.0 -> v0.37.0
* **golang.org/x/sys**                      v0.18.0 -> v0.31.0
* **golang.org/x/text**                     v0.14.0 -> v0.23.0
* **gopkg.in/yaml.v3**                      v3.0.1 **_new_**
Previous release can be found at [api/v1.8.0](https://github.com/containerd/containerd/releases/tag/api/v1.8.0)

containerd 2.1.0-rc.0
Welcome to the v2.1.0-rc.0 release of containerd!
*This is a pre-release of containerd*
The first minor release of containerd 2.x focuses on continued stability alongside
new features and improvements. This is the first time-based released for containerd.
Most the feature set and core functionality has long been stable and harderened in production
environments, so now we transition to a balance of timely delivery of new functionality
with the same high confidence in stability and performance.
### Highlights
* Add no_sync option to boost boltDB performance on ephemeral environments ([#10745](#10745))
* Add content create event ([#11006](#11006))
* Erofs snapshotter and differ ([#10705](#10705))
#### Container Runtime Interface (CRI)
* Update CRI to use transfer service for image pull by default ([#8515](#8515))
* Support multiple cni plugin bin dirs ([#11311](#11311))
* Support container restore through CRI/Kubernetes ([#10365](#10365))
* Add OCI/Image Volume Source support ([#10579](#10579))
* Enable Writable cgroups for unprivileged containers ([#11131](#11131))
* Fix recursive RLock() mutex acquisition ([containerd/go-cni#126](containerd/go-cni#126))
* Support CNI STATUS Verb ([containerd/go-cni#123](containerd/go-cni#123))
#### Image Distribution
* Multipart layer fetch ([#10177](#10177))
* Enable HTTP debug and trace for transfer based puller ([#10762](#10762))
* Add support for unpacking custom media types  ([#11744](#11744))
* Add dial timeout field to hosts toml configuration ([#11106](#11106))
#### Node Resource Interface (NRI)
* Expose Pod assigned IPs to NRI plugins ([#10921](#10921))
#### Runtime
* Support multiple uid/gid mappings ([#10722](#10722))
* Fix race between serve and immediate shutdown on the server ([containerd/ttrpc#175](containerd/ttrpc#175))
#### Deprecations
* Postpone cri config deprecations to v2.2 ([#11684](#11684))
* Remove deprecated dynamic library plugins ([#11683](#11683))
* Remove the support for Schema 1 images ([#11681](#11681))
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
### Contributors
* Phil Estes
* Derek McGowan
* Akihiro Suda
* Maksym Pavlenko
* Jin Dong
* Wei Fu
* Sebastiaan van Stijn
* Samuel Karp
* Austin Vazquez
* Mike Brown
* Kazuyoshi Kato
* Akhil Mohan
* Henry Wang
* Adrien Delorme
* Gao Xiang
* ningmingxiao
* Krisztian Litkey
* Archit Kulkarni
* Chris Henzie
* Iceber Gu
* Yang Yang
* Alexey Lunev
* Antonio Ojea
* Davanum Srinivas
* Marat Radchenko
* Michael Zappa
* Paweł Gronowski
* Alberto Garcia Hierro
* Amit Barve
* Andrey Smirnov
* Divya
* Etienne Champetier
* Kirtana Ashok
* Philip Laine
* QiPing Wan
* fengwei0328
* zounengren
* Adrian Reber
* Alfred Wingate
* Amal Thundiyil
* Athos Ribeiro
* Brian Goff
* Cesar Talledo
* ChengyuZhu6
* Chongyi Zheng
* Craig Ingram
* David Son
* Fupan Li
* HirazawaUi
* Jing Xu
* Jonathan A. Sternberg
* Jose Fernandez
* Kaita Nakamura
* Kohei Tokunaga
* Lei Liu
* Marco Visin
* Mike Baynton
* Qiyuan Liang
* Sameer
* Shiming Zhang
* Teresaliu
* Tony Fang
* Tõnis Tiigi
* Vered Rosen
* bo.jiang
* chriskery
* luchenhan
* mahmut
* zhaixiaojuan
### Dependency Changes
* **github.com/Microsoft/hcsshim**                                                 v0.12.9 -> v0.13.0-rc.3
* **github.com/cilium/ebpf**                                                       v0.11.0 -> v0.16.0
* **github.com/containerd/cgroups/v3**                                             v3.0.3 -> v3.0.5
* **github.com/containerd/containerd/api**                                         v1.8.0 -> v1.9.0-rc.0
* **github.com/containerd/continuity**                                             v0.4.4 -> v0.4.5
* **github.com/containerd/go-cni**                                                 v1.1.10 -> v1.1.12
* **github.com/containerd/imgcrypt/v2**                                            v2.0.0-rc.1 -> v2.0.1
* **github.com/containerd/otelttrpc**                                              ea5083fda723 -> v0.1.0
* **github.com/containerd/platforms**                                              v1.0.0-rc.0 -> v1.0.0-rc.1
* **github.com/containerd/ttrpc**                                                  v1.2.6 -> v1.2.7
* **github.com/containerd/typeurl/v2**                                             v2.2.2 -> v2.2.3
* **github.com/containernetworking/cni**                                           v1.2.3 -> v1.3.0
* **github.com/containernetworking/plugins**                                       v1.5.1 -> v1.6.2
* **github.com/containers/ocicrypt**                                               v1.2.0 -> v1.2.1
* **github.com/davecgh/go-spew**                                                   d8f796af33cc -> v1.1.1
* **github.com/fsnotify/fsnotify**                                                 v1.7.0 -> v1.9.0
* **github.com/go-jose/go-jose/v4**                                                v4.0.4 -> v4.0.5
* **github.com/google/go-cmp**                                                     v0.6.0 -> v0.7.0
* **github.com/grpc-ecosystem/grpc-gateway/v2**                                    v2.22.0 -> v2.26.1
* **github.com/klauspost/compress**                                                v1.17.11 -> v1.18.0
* **github.com/mdlayher/socket**                                                   v0.4.1 -> v0.5.1
* **github.com/moby/spdystream**                                                   v0.4.0 -> v0.5.0
* **github.com/moby/sys/user**                                                     v0.3.0 -> v0.4.0
* **github.com/opencontainers/image-spec**                                         v1.1.0 -> v1.1.1
* **github.com/opencontainers/runtime-spec**                                       v1.2.0 -> v1.2.1
* **github.com/opencontainers/selinux**                                            v1.11.1 -> v1.12.0
* **github.com/pelletier/go-toml/v2**                                              v2.2.3 -> v2.2.4
* **github.com/petermattis/goid**                                                  4fcff4a6cae7 **_new_**
* **github.com/pmezard/go-difflib**                                                5d4384ee4fb2 -> v1.0.0
* **github.com/prometheus/client_golang**                                          v1.20.5 -> v1.22.0
* **github.com/prometheus/common**                                                 v0.55.0 -> v0.62.0
* **github.com/sasha-s/go-deadlock**                                               v0.3.5 **_new_**
* **github.com/smallstep/pkcs7**                                                   v0.1.1 **_new_**
* **github.com/stretchr/testify**                                                  v1.9.0 -> v1.10.0
* **github.com/tchap/go-patricia/v2**                                              v2.3.1 -> v2.3.2
* **github.com/urfave/cli/v2**                                                     v2.27.5 -> v2.27.6
* **github.com/vishvananda/netns**                                                 v0.0.4 -> v0.0.5
* **go.etcd.io/bbolt**                                                             v1.3.11 -> v1.4.0
* **go.opentelemetry.io/auto/sdk**                                                 v1.1.0 **_new_**
* **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc**  v0.56.0 -> v0.60.0
* **go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp**                v0.56.0 -> v0.60.0
* **go.opentelemetry.io/otel**                                                     v1.31.0 -> v1.35.0
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace**                            v1.31.0 -> v1.35.0
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc**              v1.31.0 -> v1.35.0
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp**              v1.31.0 -> v1.35.0
* **go.opentelemetry.io/otel/metric**                                              v1.31.0 -> v1.35.0
* **go.opentelemetry.io/otel/sdk**                                                 v1.31.0 -> v1.35.0
* **go.opentelemetry.io/otel/trace**                                               v1.31.0 -> v1.35.0
* **go.opentelemetry.io/proto/otlp**                                               v1.3.1 -> v1.5.0
* **golang.org/x/crypto**                                                          v0.28.0 -> v0.36.0
* **golang.org/x/exp**                                                             aacd6d4b4611 -> 2d47ceb2692f
* **golang.org/x/mod**                                                             v0.21.0 -> v0.24.0
* **golang.org/x/net**                                                             v0.30.0 -> v0.38.0
* **golang.org/x/oauth2**                                                          v0.22.0 -> v0.27.0
* **golang.org/x/sync**                                                            v0.8.0 -> v0.13.0
* **golang.org/x/sys**                                                             v0.26.0 -> v0.32.0
* **golang.org/x/term**                                                            v0.25.0 -> v0.30.0
* **golang.org/x/text**                                                            v0.19.0 -> v0.23.0
* **golang.org/x/time**                                                            v0.3.0 -> v0.7.0
* **google.golang.org/genproto/googleapis/api**                                    5fefd90f89a9 -> 56aae31c358a
* **google.golang.org/genproto/googleapis/rpc**                                    324edc3d5d38 -> 56aae31c358a
* **google.golang.org/grpc**                                                       v1.67.1 -> v1.72.0
* **google.golang.org/protobuf**                                                   v1.35.1 -> v1.36.6
* **k8s.io/api**                                                                   v0.31.2 -> v0.32.3
* **k8s.io/apimachinery**                                                          v0.31.2 -> v0.32.3
* **k8s.io/apiserver**                                                             v0.31.2 -> v0.32.3
* **k8s.io/client-go**                                                             v0.31.2 -> v0.32.3
* **k8s.io/component-base**                                                        v0.31.2 -> v0.32.3
* **k8s.io/cri-api**                                                               v0.31.2 -> v0.32.3
* **k8s.io/kubelet**                                                               v0.31.2 -> v0.32.3
* **k8s.io/utils**                                                                 18e509b52bc8 -> 3ea5e8cea738
* **sigs.k8s.io/json**                                                             bc3834ca7abd -> 9aa6b5e7a4b3
* **sigs.k8s.io/structured-merge-diff/v4**                                         v4.4.1 -> v4.4.2
* **tags.cncf.io/container-device-interface**                                      v0.8.0 -> v1.0.1
* **tags.cncf.io/container-device-interface/specs-go**                             v0.8.0 -> v1.0.0
Previous release can be found at [v2.0.0](https://github.com/containerd/containerd/releases/tag/v2.0.0)
### Which file should I download?
* `containerd-<VERSION>-<OS>-<ARCH>.tar.gz`:         ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).
* `containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz`:  Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.
In addition to containerd, typically you will have to install [runc](https://github.com/opencontainers/runc/releases)
and [CNI plugins](https://github.com/containernetworking/plugins/releases) from their official sites too.
See also the [Getting Started](https://github.com/containerd/containerd/blob/main/docs/getting-started.md) documentation.

containerd api/v1.9.0-rc.0
Welcome to the api/v1.9.0-rc.0 release of containerd!
*This is a pre-release of containerd*
The 10th release for the containerd 1.x API aligns with the containerd 2.1 release.
### Highlights
* Enable HTTP debug and trace for transfer based puller ([#10762](#10762))
* Add content create event ([#11006](#11006))
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
### Contributors
* Derek McGowan
* Maksym Pavlenko
* Akihiro Suda
* Davanum Srinivas
* Phil Estes
* Adrian Reber
* Jin Dong
* Philip Laine
### Changes
<details><summary>16 commits</summary>
<p>
* Add release notes for api v1.9.0-rc.0 ([#11751](#11751))
  * [`c0ce618a1`](c0ce618) Add release notes for api v1.9.0-rc.0
* Enable HTTP debug and trace for transfer based puller ([#10762](#10762))
  * [`17b6e1ef8`](17b6e1e) Allow streaming to client
  * [`40eb2fdbb`](40eb2fd) Fix protos
  * [`1d436803d`](1d43680) Add http debug fields to OCI registry protos
* Add content create event ([#11006](#11006))
  * [`752914b5b`](752914b) Add content create event to api
* bump golang.org/x/net from 0.33.0 to 0.37.0 ([#11574](#11574))
  * [`7fe5c4123`](7fe5c41) go.mod: golang.org/x/net v0.37.0
* Support container restore through CRI/Kubernetes ([#10365](#10365))
  * [`9e6beafd5`](9e6beaf) Support container restore through CRI/Kubernetes
* build(deps): bump golang.org/x/net from 0.23.0 to 0.33.0 in /api ([#11472](#11472))
  * [`37fe1e8b4`](37fe1e8) build(deps): bump golang.org/x/net from 0.23.0 to 0.33.0 in /api
* Bump to newer opencontainers/image-spec @ v1.1.1 ([#11461](#11461))
  * [`d37ea6977`](d37ea69) Bump to newer opencontainers/image-spec @ v1.1.1
</p>
</details>
### Dependency Changes
* **github.com/opencontainers/image-spec**  v1.1.0 -> v1.1.1
* **golang.org/x/net**                      v0.23.0 -> v0.37.0
* **golang.org/x/sys**                      v0.18.0 -> v0.31.0
* **golang.org/x/text**                     v0.14.0 -> v0.23.0
* **gopkg.in/yaml.v3**                      v3.0.1 **_new_**
Previous release can be found at [api/v1.8.0](https://github.com/containerd/containerd/releases/tag/api/v1.8.0)

containerd 2.0.5
Welcome to the v2.0.5 release of containerd!
The fifth patch release for containerd 2.0 includes various bug fixes and updates.
### Highlights
#### Build and Release Toolchain
* Update go to 1.23.8 ([#11717](#11717))
#### Container Runtime Interface (CRI)
* Update ImageService to delete images synchronously ([#11599](#11599))
#### Image Distribution
* Prevent panic on zero length push ([#11698](#11698))
* Set default differ for the default unpack config of transfer service ([#11688](#11688))
#### Runtime
* Remove invalid error log when stopping container after containerd restart ([#11621](#11621))
* Update taskOptions based on runtimeOptions when creating a task ([#11618](#11618))
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
### Contributors
* Akihiro Suda
* Akhil Mohan
* Derek McGowan
* Phil Estes
* Wei Fu
* Iceber Gu
* Austin Vazquez
* Maksym Pavlenko
* Cesar Talledo
* Henry Wang
* Jin Dong
* Krisztian Litkey
* Yang Yang
### Changes
<details><summary>33 commits</summary>
<p>
* Update go to 1.23.8 ([#11717](#11717))
  * [`5bcf0a95e`](5bcf0a9) use go1.23.8 as the default go version
  * [`4838f33f7`](4838f33) update to go 1.24.2, 1.23.8
* Prepare release notes for v2.0.5 ([#11713](#11713))
  * [`a8082cd60`](a8082cd) Prepare release notes for v2.0.5
* Disable criu test on arm64 ([#11710](#11710))
  * [`58b715ad8`](58b715a) Disable arm64 criu testing in GH Actions
  * [`b4a53e826`](b4a53e8) disable portmap test in ubuntu-22 to make CI happy
  * [`4bcf472de`](4bcf472) add option to skip tests in critest
* Prevent panic on zero length push ([#11698](#11698))
  * [`8a638b71a`](8a638b7) Prevent panic in Docker pusher.
* Set default differ for the default unpack config of transfer service ([#11688](#11688))
  * [`84d9658c3`](84d9658) Set default differ for the default unpack config of transfer service
* ci: update GitHub Actions release runner to ubuntu-24.04 ([#11703](#11703))
  * [`b184a97d3`](b184a97) ci: update GitHub Actions release runner to ubuntu-24.04
* Remove invalid error log when stopping container after containerd restart ([#11621](#11621))
  * [`e04543db0`](e04543d) use shimCtx for fifo copy
* Update taskOptions based on runtimeOptions when creating a task ([#11618](#11618))
  * [`9f46e7a44`](9f46e7a) integration/client: add tests for TaskOptions is not empty
  * [`8a16a6a04`](8a16a6a) prefer task options for PluginInfo request
  * [`a183b2d23`](a183b2d) update taskOptions based on runtimeOptions when creating a task
* Update ImageService to delete images synchronously ([#11599](#11599))
  * [`091143135`](0911431) *: CRIImageService should delete image synchronously
* Update runc binary to v1.2.6 ([#11583](#11583))
  * [`c2372c072`](c2372c0) Update runc binary to v1.2.6
* go.{mod,sum}: bump CDI deps to stable v1.0.0. ([#11566](#11566))
  * [`e8506511b`](e850651) go.{mod,sum}: bump CDI deps to stable v1.0.0.
* silence govulncheck false positives ([#11571](#11571))
  * [`4cfb89430`](4cfb894) go.mod: github.com/go-jose/go-jose/v4
  * [`2b9e6a29d`](2b9e6a2) go.mod: golang.org/x/oauth2 v0.28.0
  * [`6df1ea0d9`](6df1ea0) go.mod: golang.org/x/net v0.37.0
* Fix CI lint error (cherry-picked #11555) ([#11567](#11567))
  * [`16f20abdf`](16f20ab) Fix CI lint error
</p>
</details>
### Dependency Changes
* **github.com/go-jose/go-jose/v4**                     v4.0.4 -> v4.0.5
* **golang.org/x/crypto**                               v0.31.0 -> v0.36.0
* **golang.org/x/net**                                  v0.33.0 -> v0.37.0
* **golang.org/x/oauth2**                               v0.23.0 -> v0.28.0
* **golang.org/x/sync**                                 v0.10.0 -> v0.12.0
* **golang.org/x/sys**                                  v0.28.0 -> v0.31.0
* **golang.org/x/term**                                 v0.27.0 -> v0.30.0
* **golang.org/x/text**                                 v0.21.0 -> v0.23.0
* **tags.cncf.io/container-device-interface**           v0.8.1 -> v1.0.0
* **tags.cncf.io/container-device-interface/specs-go**  v0.8.0 -> v1.0.0
Previous release can be found at [v2.0.4](https://github.com/containerd/containerd/releases/tag/v2.0.4)
### Which file should I download?
* `containerd-<VERSION>-<OS>-<ARCH>.tar.gz`:         ✅Recommended. Dynamically linked with glibc 2.31 (Ubuntu 20.04).
* `containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz`:  Statically linked. Expected to be used on non-glibc Linux distributions. Not position-independent.
In addition to containerd, typically you will have to install [runc](https://github.com/opencontainers/runc/releases)
and [CNI plugins](https://github.com/containernetworking/plugins/releases) from their official sites too.
See also the [Getting Started](https://github.com/containerd/containerd/blob/main/docs/getting-started.md) documentation.